CVE-2026-68482: apache software foundation apache answer Missing Authorization

CVSS: UnknownDeferred

Published 19-10-2026Last modified 19-10-2026

Vulnerability summary

CVE-2026-68482 is a Missing Authorization vulnerability in apache software foundation apache answer with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

19-10-2026
PublishedVulnerability first disclosed.
19-10-2026
Last modifiedVulnerability information updated.

Description

Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An unauthenticated or unauthorized user can retrieve the invited-user list associated with a non-public question due to missing visibility authorization checks. Users are recommended to upgrade to version 2.0.3, which fixes the issue.

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-862Missing AuthorizationThe product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Affected systems

Apache software foundation1 product

apache answer≤ 2.0.2

1 vendor · 1 product

References

2 links